Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54729.roa
File: AS54729.roa (raw, json)
Hash identifier: bCN2CuowSjxWyhf/ozZhJ/2MAY0Oc/0FVRyxGeUmFeo=
Subject key identifier: 4E:C9:62:92:72:58:B8:A4:0B:95:C4:55:CA:A6:5C:55:E3:69:81:CA
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 3E19A980F2AD10571BB1294A5B8DA001BD373A32
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54729.roa
Signing time: Wed 21 Dec 2022 16:56:55 +0000
ROA not before: Wed 21 Dec 2022 16:51:55 +0000
ROA not after: Wed 20 Dec 2023 16:56:55 +0000
asID: 54729
IP address blocks: 2a06:a005:433::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:19:a9:80:f2:ad:10:57:1b:b1:29:4a:5b:8d:a0:01:bd:37:3a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:55 2022 GMT
Not After : Dec 20 16:56:55 2023 GMT
Subject: CN=4EC962927258B8A40B95C455CAA65C55E36981CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:fe:04:a4:8d:fe:98:84:f3:a2:bc:6b:c2:
ee:55:8b:d4:59:de:7b:de:2b:50:6f:03:50:53:ec:
60:2e:59:e1:dd:1a:6b:1b:5f:ab:ba:8a:e2:ac:c4:
79:93:20:9a:5f:72:29:b7:50:5a:7a:a4:45:06:dd:
3e:e5:d5:b0:47:53:e7:41:4b:fb:2e:4b:69:ad:d7:
52:77:50:07:8b:5f:26:d1:56:12:94:a5:59:07:88:
7f:56:27:c4:80:79:13:36:9e:cb:c8:46:6c:0f:c0:
cb:e1:0c:2f:55:3a:3e:ab:bc:b6:ed:5f:bc:10:4b:
37:e4:2e:e5:f9:1c:b2:db:96:82:d4:4c:b8:bb:19:
bf:c8:d6:49:cc:6c:78:fe:d3:40:d2:5b:ea:b4:07:
e2:9b:f5:60:06:7b:25:01:5e:63:2a:8e:7c:8f:4d:
79:e1:a1:28:da:d5:67:2c:8c:ec:f2:ae:be:c5:d2:
3d:4e:0e:2d:02:9d:e4:5b:e5:10:0a:1b:75:50:5c:
86:39:b8:f4:06:e2:ca:96:e6:71:ce:a7:a3:ba:12:
85:74:2e:86:8f:4f:90:67:cc:96:b6:cf:19:8c:64:
1e:c3:a6:3e:0b:7c:27:53:0e:98:9a:83:e2:5c:fb:
cd:7f:93:5f:47:2b:8d:2a:56:2c:67:fb:9a:95:1e:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C9:62:92:72:58:B8:A4:0B:95:C4:55:CA:A6:5C:55:E3:69:81:CA
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS54729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:433::/48
Signature Algorithm: sha256WithRSAEncryption
b5:0d:1d:92:b2:5b:1c:4c:88:ae:43:42:83:75:29:8f:2b:71:
be:c6:46:fc:e0:80:bd:32:e1:b8:57:c8:77:5f:25:ef:2a:a2:
b0:b5:60:56:ae:8e:a8:f9:38:4e:d4:2a:1e:28:75:50:ba:3f:
35:09:b4:c5:b2:df:f4:9d:24:a4:f1:eb:38:da:28:0f:fb:f3:
3d:fc:88:d2:0f:61:6b:19:a1:13:3b:ba:7f:14:3b:a0:73:48:
97:33:be:80:f8:9a:80:bc:ed:56:43:26:77:03:91:92:ba:bd:
29:ac:92:24:17:f9:b8:36:e6:68:f2:ed:58:af:07:b7:00:e5:
ee:b2:da:e4:e8:59:a9:3a:2a:0d:34:a2:f5:5d:60:50:0c:a5:
06:cc:96:9a:87:ad:f8:ae:52:f1:40:bd:c9:59:c8:da:df:39:
b2:7b:da:b1:a0:37:19:e8:b2:9d:8c:08:c7:3c:60:fd:40:a1:
f2:2a:00:53:fe:2f:53:f6:c8:7b:0f:41:2d:3f:b2:ae:31:1b:
d0:fe:9b:eb:b3:34:c9:54:8f:06:a6:55:76:b6:f7:4b:0f:de:
05:65:d0:38:8c:7a:16:cb:20:f8:fa:ca:56:d6:4e:68:51:c9:
3d:c9:7c:81:16:63:1f:48:70:10:6a:b8:1a:eb:34:44:c4:36:
88:8b:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:47 2025 by rpki-client